Malaysia Achieves Tier 1 Status in Post-Quantum Cryptography Readiness

Malaysia has been officially recognized as the only ASEAN country to achieve Tier 1 status in post-quantum cryptography (PQC) readiness, according to the National Security Council (MKN). This designation reflects the country's proactive approach to enhancing cybersecurity in light of advancements in quantum computing.

The ASEAN Post-Quantum Cryptography Readiness 2026 report, published by SITG-Consulting on 1 September 2026, assessed the readiness of the ten ASEAN nations and placed Malaysia at the top tier, while Brunei, Cambodia, Indonesia, Singapore, Thailand, and Vietnam were categorized in Tier 2, the Philippines in Tier 3, Laos in Tier 4, and Myanmar in Tier 5. MKN noted that this assessment is based on verifiable actions and national implementations rather than mere intentions or technological progress.

MKN said the achievement demonstrates the successful development and implementation of PQC migration programs in Malaysia. The initiative is part of the government’s broader strategy to ensure the security and resilience of critical national information infrastructure (NCII) against potential quantum threats.

“MKN said the achievement demonstrates the successful development and implementation of PQC migration programs in Malaysia.”National Security Council

Malaysia's commitment to PQC is encapsulated in the MyKriptografi framework, which was approved by the Cabinet on 28 November 2025. This policy aims to establish a robust cryptographic ecosystem that protects the data of the government, critical industries, and citizens from sophisticated cyber threats associated with quantum computing.

As part of the transition to PQC, the Malaysian Communications and Multimedia Commission (MCMC) has been tasked with collaborating with various stakeholders, including the National Cyber Security Agency (NACSA) and telecommunications operators, to create a shared research and development (R&D) testbed. Communications Minister Datuk Seri Fahmi Fadzil highlighted the importance of building trust and interoperability through common standards and coordinated testing of solutions.

“Fadzil said that as quantum communications develop, governments and industry players must build trust and interoperability through common standards, equipment testing, and a phased transition to quantum-resistant cryptography, without disrupting essential services.”Datuk Seri Fahmi Fadzil, Communications Minister

Fadzil said that as quantum communications develop, governments and industry players must build trust and interoperability through common standards, equipment testing, and a phased transition to quantum-resistant cryptography, without disrupting essential services. He also mentioned that Malaysia is developing a national plan to move critical information infrastructure to post-quantum cryptography and that MCMC is engaging with NSC, NACSA, and telecommunications operators on a shared R&D testbed to test solutions together and accelerate the transition securely.

This strategic initiative is supported by several national programs, including the Malaysia Cyber Security Strategy 2025-2030 and the National Cryptography Policy. The government aims to ensure that Malaysia's NCII remains secure and resilient in the face of evolving technological challenges.

CyberSecurity Malaysia is involved in the transition by providing specialized services and training programs to support organizations in adopting quantum-safe cryptographic measures. The department recognizes the imperative of transitioning from traditional cryptographic methods to post-quantum solutions to safeguard sensitive data against potential quantum adversaries.